$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: VLe5aFNRK0mz/ClZAbJOqctpwg14cpfHBIwlNyTMLaA= Subject key identifier: 55:89:68:09:BA:21:BA:5A:14:0F:53:CB:08:05:9C:04:4A:20:BC:59 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 0199FB7CD3C698D8EDE70EE553FC92BEB41F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 13DE Signing time: Sun 19 Oct 2025 08:01:25 +0000 Manifest this update: Sun 19 Oct 2025 08:01:25 +0000 Manifest next update: Mon 20 Oct 2025 08:01:25 +0000 Files and hashes: 1: 1-oV8wOxM52lFBAZelvlJ1ChLVhE.roa (hash: qQM4l/X3SkEZ4h6aGb2fizqmObGG55sXX+NpcuuHKmE=) 2: 5DRGkm67v3ztNtkmGE9CjHe6qkM.roa (hash: c8V8b8nhOphSZmzRUJQWFcuzVB0h+VPYqSuF8VwM49s=) 3: 7yxzEpwrPvkVtysBCZ9w3NvniME.roa (hash: myjWs4rYeOG9qs0FigCiX4CRWLx91cNiLYd0bOOlv14=) 4: 92YX8_mKsRYRDoG9l3vH6epU_24.roa (hash: R3F3U2oxwWbOLay+ACJCalTUQG9HKAHuMPfnBBPm6HM=) 5: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: At3Rx3InXqkCY+wryFNUoCZApxauglcBMm9ixh05FZ0=) 6: KFrQOrOGrx778yQcymTgUx9hD68.roa (hash: cTtECuElVvdbMAGilPAdoZX/Qe3XcmxVm71uJTnN4+A=) 7: KO2tMW1du9dekDI4Y-9_plcBYSk.roa (hash: L0Z21UNOLLnga8zui/KqFlS4YtgeuRJ/OBRssHd9hXE=) 8: MNDWfcZ7THpd1V-JitlFbJJvT2k.roa (hash: 8342ttspxabX1GCBeEK5LbRuFU+2GSg8qKL1eSDng9w=) 9: XST97aNGZZRqCU4Q2norfi4ndhI.roa (hash: Ej7Bdzjuir9bzqXEX3Za6erR0SRowgGxNRVnC/R3Coo=) 10: dDuXmy2-kOiyveIRPNO2zv9O6K4.roa (hash: dIZYpEJfOlH3jzzYUHlsUhacisdYiaRu3PDoh93lXCs=) 11: f-WBLlvCqU3gT2U4k2jp9nRYULc.roa (hash: SbHCNZepVf+SJT1VG5+nfS1tN9EtzQEtvMS4oCBecRI=) 12: fUyauZFzWLubSyadnmzbsZyl6iM.roa (hash: ZXpfbo2eejrS0yFMBL0ES1gh6HanTDFLIm85aYT7+bA=) 13: iGMhmXXBNt2s7l-0mx0YRvUMWSo.roa (hash: McOC3wl39qVTP2IvApkUHWGgt9CHnxQ9E9acv2S4LQA=) 14: jiF9vHMkWKJpjP76Gux54TKpnzc.roa (hash: CCXc0iW9MVKVYNnO0rxCM2yL2mQD+I1ttQ+9hGTDpvQ=) 15: jvpcLjBfXq2k1CyzEi-i4yMMJCg.roa (hash: d6CrkQWol3xr2PKuUL7zdsYsRYcblyvcCYZMvOC8fx8=) 16: w1UWJINQiqIyHaTTFS0euILJR58.roa (hash: jXqC61xJbm2P2p00w1kBmanAbpZq6zjGJCspuExiIe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 08:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:7c:d3:c6:98:d8:ed:e7:0e:e5:53:fc:92:be:b4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Oct 19 08:01:25 2025 GMT Not After : Oct 20 08:01:25 2025 GMT Subject: CN=55896809ba21ba5a140f53cb08059c044a20bc59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:c1:5f:86:8e:75:8c:f8:fe:c3:a9:29:53:60: 12:4a:2c:2b:97:03:8e:5c:cf:e0:ef:30:9e:87:c8: 16:81:17:69:3e:b6:9a:e0:5c:83:6e:c9:d9:cd:df: 05:eb:45:2f:58:2c:d3:cb:d9:2b:57:e0:96:54:cc: 7b:35:d7:11:7d:1e:fa:fb:91:cd:83:82:df:24:ef: 79:65:c7:87:8e:32:3c:44:1c:72:d4:07:3a:2b:67: 1d:0b:63:7b:93:9c:c5:24:7b:a5:b6:c0:23:9c:30: 54:99:28:18:5e:fd:0d:e0:e8:a9:6a:c5:e3:6b:f6: bf:0a:a5:c9:49:f0:09:1b:4c:9f:59:f2:1a:42:72: 6e:2e:82:51:41:5c:66:45:8d:c0:c6:e2:0c:7c:a9: fd:4d:57:a4:8c:2d:3a:15:36:07:af:42:54:3d:5d: 23:b3:26:1e:5f:13:e4:5b:d3:31:46:97:f9:c1:f7: 6c:86:e6:10:b3:12:b4:c2:58:07:96:3c:a7:cf:da: 4e:f0:c9:58:a1:c9:98:6d:c4:af:aa:2e:88:9a:44: bd:57:f3:33:89:6d:16:3c:92:a0:73:52:a1:d3:25: 42:89:3d:83:e5:99:20:c5:aa:7d:b8:4b:22:fd:93: fa:ba:67:15:21:17:d7:53:2d:e8:f0:5c:98:0f:ea: 24:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:89:68:09:BA:21:BA:5A:14:0F:53:CB:08:05:9C:04:4A:20:BC:59 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f7:26:fb:de:b5:aa:8a:9c:7d:82:d0:7f:b9:ed:8b:a1:27: f8:86:5f:56:2f:b7:af:61:44:29:06:d0:05:da:2f:fa:e5:5c: 7b:80:62:a3:4d:94:ad:b8:bc:d3:d4:af:b4:e3:d4:ec:e0:6f: a0:ea:e1:65:e4:3d:07:49:e4:f0:f0:4f:c7:bd:aa:12:d6:20: b3:8b:da:52:68:e3:10:5e:16:c9:f2:51:b9:8a:9c:9f:60:bd: bb:40:b0:94:f5:9f:4f:6f:d9:7f:76:db:5f:11:48:2d:67:41: 30:26:0e:3b:07:bf:fa:18:c6:ca:7e:86:fa:bc:1f:65:d8:9e: 55:ce:65:69:86:ba:1d:21:08:e5:78:b4:3e:33:34:f2:03:b8: 74:d2:0e:c2:11:17:0a:91:e3:80:96:a3:24:fb:02:77:f9:6c: a2:36:c5:e0:4b:f6:be:67:af:4d:da:5a:6c:41:e0:e1:e3:d2: 7c:76:58:48:8c:3f:fd:8c:e3:bf:8f:92:a7:1a:32:1f:73:b9: 17:b7:ee:50:cd:9e:95:02:69:f1:d0:58:66:b4:c2:eb:6b:28: 0d:8c:30:d3:1e:0c:18:61:c3:93:cc:13:cb:c6:04:c4:58:e4: 3a:ed:5e:87:20:76:54:fc:47:19:ff:d9:da:76:21:e4:34:e4: 95:4d:9c:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7fNPGmNjt5w7lU/ySvrQfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjUxMDE5MDgwMTI1WhcNMjUxMDIwMDgwMTI1WjAzMTEwLwYDVQQD Eyg1NTg5NjgwOWJhMjFiYTVhMTQwZjUzY2IwODA1OWMwNDRhMjBiYzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9cFfho51jPj+w6kpU2ASSiwrlwOO XM/g7zCeh8gWgRdpPraa4FyDbsnZzd8F60UvWCzTy9krV+CWVMx7NdcRfR76+5HN g4LfJO95ZceHjjI8RBxy1Ac6K2cdC2N7k5zFJHultsAjnDBUmSgYXv0N4OipasXj a/a/CqXJSfAJG0yfWfIaQnJuLoJRQVxmRY3AxuIMfKn9TVekjC06FTYHr0JUPV0j syYeXxPkW9MxRpf5wfdshuYQsxK0wlgHljynz9pO8MlYocmYbcSvqi6ImkS9V/Mz iW0WPJKgc1Kh0yVCiT2D5Zkgxap9uEsi/ZP6umcVIRfXUy3o8FyYD+ok1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWJaAm6IbpaFA9TywgFnARKILxZMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/cm+961 qoqcfYLQf7nti6En+IZfVi+3r2FEKQbQBdov+uVce4Bio02Urbi809SvtOPU7OBv oOrhZeQ9B0nk8PBPx72qEtYgs4vaUmjjEF4WyfJRuYqcn2C9u0CwlPWfT2/Zf3bb XxFILWdBMCYOOwe/+hjGyn6G+rwfZdieVc5laYa6HSEI5Xi0PjM08gO4dNIOwhEX CpHjgJajJPsCd/lsojbF4Ev2vmevTdpabEHg4ePSfHZYSIw//Yzjv4+SpxoyH3O5 F7fuUM2elQJp8dBYZrTC62soDYww0x4MGGHDk8wTy8YExFjkOu1ehyB2VPxHGf/Z 2nYh5DTklU2cXw== -----END CERTIFICATE-----Generated at Sun Oct 19 17:29:43 2025 by rpki-client